Re: logwatch reports on new RHEL ES 4

[Craig White <craigwhite azapple com>]

On Wed, 2005-03-16 at 08:36 -0600, Steve Buehler wrote:
> I am running RHEL ES 4 on a test machine before using it in full 
> production.  My log reports show probes from phpmyadmin.  Right not I use 
> it to test some mysql scripts.  I have "SELINUX=disabled" in its config 
> until I have time to figure it out since it wouldn't let me run some of my 
> scripts.  Anyway, are these log entries something that is going to happen 
> with every page that is accessed on the web server?  If so, this is going 
> to be pretty annoying when I put this into production and have a few 
> hundred sites on it.  That is going to make for a very LARGE logwatch 
> report.  I know there is something somewhere that I am missing, but just 
> can't find it.
> ----start logwatch snippet------
> --------------------- httpd Begin ------------------------
> 
> A total of 1 sites probed the server
>    192.168.1.67
> 
> !!!! 51 possible successful probes
>   /phpmyadmin/tbl_change.php?lang=en-utf-8&server=1&collation_connection=utf8_general_ci&db=mysql&table=user&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&sql_query=SELECT+%2A+FROM+%60user%60&goto=sql.php%3Flang%3Den-utf-8%26amp%3Bserver%3D1%26amp%3Bcollation_connection%3Dutf8_general_ci%26amp%3Bdb%3Dmysql%26amp%3Btable%3Duser%26amp%3Bpos%3D0%26amp%3Bsession_max_rows%3D30%26amp%3Bdisp_direction%3Dhorizontal%26amp%3Brepeat_cells%3D100%26amp%3Bdontlimitchars%3D0%26amp%3Bsql_query%3DSELECT%2B%252A%2BFROM%2B%2560user%2560 
> HTTP Response 200
>   /phpmyadmin/themes/original/img/s_asc.png HTTP Response 200
> ----end logwatch snippet------
----
suggest you look at

man logwatch

Craig